Monday, March 08, 2010

[avwepxlj] Tamper detection of your account

Has someone else been accessing your account, possibly because your password has been compromised?

Here is a way to set things up so the user will find out. Upon logging in, the first thing the system does is ask you one or more randomly selected questions, perhaps open ended or philosophical so there is no right answer. Select from a very large collection. Having recorded your answer, it then displays information from your previous login, including the question answer pair as well as mundane information such as time and date and hostname and IP address and transactions you did.

How you answer an open-ended philosophical question is a fingerprint of your soul. Only you can generate it, and you can verify it.

Deleting an answer requires answering another.

No comments :